CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls. PUBLISHED

Description (CNA)

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Affected (CNA)

Vendor / product	Versions
Pegasystems / Pega Infinity	affected 8.5.0 before Infinity 25.1.3

CWE

CWE-347

References

https://support.pega.com/support-doc/pega-security-advisory-m26-vulnerability-remediation-note

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.